受信側　SPF

CONTENTS

受信側　SPF

Lastmodified　2024-01-18 (木) 12:45:32

受信側　SPF†

https://admnote.paix.jp/2022/07/postfix%E3%81%ABspf%E5%B0%8E%E5%85%A5/

↑

portinstall mail/py-spf-engine†

↑

master.cf†

/usr/local/etc/postfix/master.cf

policyd-spf unix - n n - 0 spawn
           user=nobody argv=/usr/local/bin/policyd-spf

↑

main.cf†

/usr/local/etc/postfix/main.cf

smtpd_recipient_restrictions =
            reject_unauth_destination
            check_policy_service unix:private/policyd-spf

policyd-spf_time_limit = 3600

「smtpd_recipient_restrictions」に policyd-spf ポリシーフィルタの呼び出しが含まれるように、main.cf で Postfix ポリシーサービスを設定します。「smtpd_recipient_restrictions」行がすでにある場合は、「reject_unauth_destination」と書かれた行の*後*のどこかに「check_policy_service」コマンドを追加できます（そうしないと、システムがオープンリレーになる可能性があります）。

↑

policyd-spf.conf†

/usr/local/etc/python-policyd-spf/policyd-spf.conf

debugLevel = 1
TestOnly = 1

HELO_reject = False
Mail_From_reject = False

PermError_reject = False
TempError_Defer = False

skip_addresses = 127.0.0.0/8,::ffff:127.0.0.0/104,::1

↑

rc.conf†

/etc/rc.conf

pyspf_milter_enable="YES"

Installing py39-spf-engine-2.9.3...
===> Creating groups.
Using existing group 'pyspf-milter'.
===> Creating users
Using existing user 'pyspf-milter'.
#
# Using policyd-spf with Postfix
#

Policyd-spf must be integrated with Postfix to be effective:

 1. Add to your postfix master.cf:

        policyd-spf  unix  -       n       n       -       0       spawn
            user=nobody argv=/usr/local/bin/policyd-spf

 2. Configure the Postfix policy service in your main.cf so that the
    "smtpd_recipient_restrictions" includes a call to the policyd-spf policy
    filter.  If you already have a "smtpd_recipient_restrictions" line, you can
    add the "check_policy_service" command anywhere *after* the line which
    reads "reject_unauth_destination" (otherwise you're system can become an
    open relay).

        smtpd_recipient_restrictions =
            ...
            reject_unauth_destination
            check_policy_service unix:private/policyd-spf
            ...

        policyd-spf_time_limit = 3600

  3. Please consult the postfix documentation for more information on these and
     other settings you may wish to have in the "smtpd_recipient_restrictions"
     configuration.

  4. Reload postfix.

#
# Automatically starting pyspf-milter at boot time.
#

Add 'pyspf_milter_enable="YES"' to /etc/rc.conf.

#
# Using pyspf-milter with Sendmail
#

Following is an example configuration line to include in your sendmail.mc.

INPUT_MAIL_FILTER(`pyspf-milter', `S=local:/var/run/pyspf-milter/pyspf-milter.sock')dnl

#
# Using pyspf-milter with Postfix
#

Integration of pyspf-milter into Postfix is like any milter (See Postfix's
README_FILES/MILTER_README). But care is required to segregate outbound mail
from inbound mail to be checked. Here is example using milter macros to keep
the mail streams segregated.

/usr/local/etc/postfix/main.cf:

smtpd_milters = unix:/var/run/pyspf-milter/pyspf-milter.sock

/usr/local/etc/postfix/master.cf:

smtp       inet  n       -       -       -       -       smtpd
    ...
        -o milter_macro_daemon_name=VERIFYING
    ...

/usr/local/etc/python-policyd-spf/policyd-spf.conf:

MacroList               daemon_name|VERIFYING


===>  Cleaning for py39-spf-engine-2.9.3
--->  Cleaning out obsolete shared libraries

Total access 584：本日 3：昨日 1

Counter: 584, today: 3, yesterday: 1